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5 BACKGROUND OF THE INVENTION 

1. Field of the Invention 

This invention relates to cryptographic devices and, in 
particular, to a cryptographic device that can easily, 
securely and/or irreversibly be customized to provide 
10 specified cryptographic functionality* 

2. Related Art 

A "cryptographic device" is a device which can be used 
to perform cryptographic operations on data. Examples of 
cryptographic operations include key exchange operations, 

15 hash operations, digital signature operations, symmetric 
encryption (secret key) operations, asymmetric (public key) 
encryption operations, and key wrapping operations (for both 
symmetric and asymmetric keys) . A "cryptographic 
characteristic" is an attribute of the manner in which a 

20 cryptographic operation is performed. An example of a 

cryptographic characteristic is the length of a cryptographic 
key. The cryptographic operations and cryptographic 
characteristics of a cryptographic device are sometimes 
referred to herein as the "cryptographic functionality" of 

25 the cryptographic device. The cryptographic functionality of 
a cryptographic device can be implemented by a computer 
processor executing instructions and/or accessing data stored 
on a data storage device. Herein, such instructions and/or 
data are sometimes referred to, singly or collectively, as 

30 "code." 

PIG. 1 is a block diagram of a typical way of producing 
and using a cryptographic device. Initially, as shown by 
block 101, a cryptographic device is "produced." As used 
herein, at the end of "production" of a cryptographic device, 
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the device includes the capability of performing 
cryptographic operations as described above* After 
production of the cryptographic device, "device fulfillment" 
takes place, as shown by block 102. "Device fulfillment," as 
5 discussed and illustrated in more detail below, involves 
modifying the cryptographic device to tailor the 
cryptographic functionality of the cryptographic device in a 
specified manner. For example, the operation of a 
cryptographic device could be restricted so that 

10 cryptographic keys longer than a specified length cannot be 
used in performing cryptographic operations with which those 
keys are used. After device fulfillment, an application 
developer develops application code (see also FIG. 3) , as 
shown by block 103, that causes particular cryptographic 

15 operations of the cryptographic device to be performed when 
the cryptographic device is used in an environment for which 
the application code is developed. For example, to ensure 
that the user of a cryptographic device is an authorized 
user, the application code may cause particular verification 

20 operations to occur when the cryptographic device is used. 
Finally, as shovm by block 104, the cryptographic device is 
used in a particular environment to perform cryptographic 
operations in accordance with the requirements and/or 
restrictions established during device fulfillment and 

25 application development. 

It can be desirable for a cryptographic device to be 
produced so as to provide flexible cryptographic 
functionality, so that the cryptographic functionality 
provided by the device can be tailored to accommodate 

30 different needs or needs that change over time. However, in 
some previous cryptographic devices, modification of 
cryptographic functionality is impossible. In other 
cryptographic devices, modification of cryptographic 
functionality is undesirably complex, compromises the 

35 security of other aspects of the cryptographic device's 
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operation, or cannot be provided in a manner that enables the 
cryptographic device to satisfy other criteria (such as 
export regulations) . 

For example, a cryptographic operation can include 

5 various sub-operations, such as, for example, mathematical 
"primitive" operations (e.g., addition, subtraction, 
multiplication, exponentiation), operation (s) used in 
generating cryptographic keys, operations for establishing 
the length of particular data and operations for padding 

10 particular data. In some situations, an application 
developer may desire the performance of a cryptographic 
operation that can be easily implemented by augmenting or 
revising the code of an existing cryptographic operation of a 
cryptographic device so that the performance of one or 

15 several sub-operations are added to the existing 

cryptographic operation and/or replace sub-operations already 
part of the existing cryptographic operation. As shown in 
FIG. 2, in previous cryptographic devices, the application 
code 201, in interacting with the code stored on a 

20 cryptographic device 200 via an application code 

interface 202, can only directly access the cryptographic 
operations 203: the component parts (e.g., mathematical 
primitive operations 204) of the cryptographic operations 203 
have not been accessible apart from the performance of a 

25 cryptographic operation. Thus, an application developer 
cannot produce application code that requires a new 
cryptographic operation unless all of the code for the new 
cryptographic operation is downloaded to (i.e., transferred 
to and stored on) the cryptographic device. As can be 

30 appreciated, the undesirability of downloading code for new 
cryptographic operations to a cryptographic device increases 
as the number of devices with which the application code may 
interact increases. Thus, the lack of accessibility to 
component parts of a cryptographic operation can make 

35 development of new application code or modification of 
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existing application code a difficult, time-consuming and 
costly undertaking. 

In some previous cryptographic devices, certain 
cryptographic characteristics have been established at the 
5 time of production of the cryptographic device so that those 
cryptographic characteristics cannot later be modified (e.g., 
the cryptographic characteristics are stored in a ROM) . 
Inhibiting the modification of the cryptographic 
functionality of a cryptographic device can be desirable to 

10 ensure that the device will be deemed to satisfy export 

regulations for cryptographic devices and/or to meet customer 
requirements for device security* However, such 
inflexibility limits the utility of any particular 
cryptographic device. For example, a cryptographic device 

15 that has particularly robust cryptographic functionality may 
be desirable for domestic use, but unacceptable for export to 
foreign customers, while a cryptographic device having 
relatively weaker cryptographic capability may be acceptable 
for export, but unappealing to domestic customers. Thus, if 

20 the cryptographic functionality of a cryptographic device 
cannot be modified, it is often necessary to produce a 
variety of different instantiations of such cryptographic 
device that each have different cryptographic functionality 
designed to satisfy a particular user, users or type of user. 

.25 SUMMARY OF THE INVENTION 

The invention enables a cryptographic device to be 
easily, securely and/or irreversibly customized to provide 
specified cryptographic functionality. 

For example, in one embodiment of the invention, a 
30 computer readable storage medium includes stored 

thereon: i) a first set of code (i.e., instructions and/or 
data) used to perform one or more sub operations (which can 
be, for example, one or more mathematical primitive 
operations); ii) a second set of code, distinct from the 
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first set of code, used to perform one or more cryptographic 
operations, the second set of code including one or more 
instructions that cause performance of instructions and/or 
use of data from the first set of code so that the one or 
5 more sub-operations are performed; and iii) a third set of 
code for allowing and mediating access to the first set of 
code from a device external to a device of which the computer 
readable storage medium is part. The computer readable 
storage medium can be a data storage device or devices that, 

10 together with a processor, can be embodied in a cryptographic 
device to flexibly provide cryptographic operations in the 
cryptographic device . 

This embodiment of the invention enables easy and secure 
modification (expansion, reduction or changing) of the 

15 application code via the exposure of, for example, the 

mathematical primitive operations available on a particular 
cryptographic device. In particular, this embodiment of the 
invention enables modification of available cryptographic 
operations at a relatively high level of programming 

20 abstraction, thus enabling such modification to be 

accomplished relatively easily. Further, this embodiment of 
the invention enables the modification to be accomplished in 
a manner that does not necessitate or allow access by the 
application developer to other operations of the 

25 cryptographic device, thus providing security for the 

proprietary code and/or cryptographic keys of other persons 
or entities that may be present on the cryptographic device. 
Additionally, this embodiment of the invention can allow 
storage of a part of the code for the cryptographic 

30 operations that need never change in a small and unmodifiable 
storage device (ROM) , while a part of the code of the 
cryptographic operations that it may desired to change is 
stored in a larger and modifiable storage device (EEPROM) , 
thus retaining the capability of modifying the cryptographic 

35 operations present on a cryptographic device, while 
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minimizing or eliminating any limitation on the number and/or 
complexity of the cryptographic operations that can be 
provided in the cryptographic device. 

In another embodiment of the invention, a computer 
5 readable storage medium includes stored thereon access 

permission data, stored in accordance with a predefined data 
structure, representing an availability of one or more 
cryptographic characteristics, each cryptographic 
characteristic enabling or affecting the performance of a 

10 cryptographic operation or a mathematical primitive operation 
by a cryptographic device, the computer readable storage 
medium having the property that, once a value or values of 
the access permission data are stored, the value or values of 
the access permission data cannot be changed. The computer 

15 readable storage medium can be a data storage device that, 
together with one or more other devices for performing 
cryptographic operations, can be embodied in a cryptographic 
device to flexibly, but irreversibly, establish cryptographic 
characteristics in accordance with which the cryptographic 

20 operations are performed. 

This embodiment of the invention enables specification 
of permissible cryptographic characteristics of a 
cryptographic device from a set of available cryptographic 
characteristics of the cryptographic device. In particular, 

25 such specification can be done in a manner that is 

irreversible, thus enabling the cryptographic device to 
satisfy export regulations for cryptographic devices and/or 
to meet customer requirements for device security. 

BRIEF DESCRIPTION OF THE DRAWINGS 
30 FIG. 1 is a block diagram of a typical way of producing 

and using a cryptographic device. 

FIG. 2 is a block diagram of a previous cryptographic 
system. 

PIG. 3 is a block diagram of a computational device in 
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which a system according to the invention can be implemented. 

FIG. 4 is a block diagram of a system according to an 
embodiment of the invention. 



DETAILED DESCRIPTION OF THE INVENTION 
5 FIG. 3 is a block diagram of a computational device 300 

in which the invention can be implemented. The computational 
device 300 includes a processor 301, a volatile memory 
device 302 (e.g,, RAM), and several non-volatile memory 
devices 303, 304 and 305. The processor 301 can be 

10 implemented by any processor that has cryptographic 

processing capability (e.g., that can perform calculations 
using numbers having a large number of bits) . In one 
particular implementation of the computational device 300, 
described in more detail hereinafter, the non-volatile memory 

15 device 303 is a read-only memory (ROM) , the non-volatile 
memory device 304 is a programmable read-only memory (PROM) 
in which the data values can be established once and never 
changed thereafter, and the non- volatile memory device 305 is 
an electrically erasable, programmable read-only memory 

20 (EEPROM) . It is to be understood that the computational 

device 300 also includes other devices (that, for simplicity, 
are not shown in FIG. 3) that are necessary to enable the 
computational device 300 to operate as described herein, such 
as devices that enable communication between the 

25 computational device 300 and other devices. Further, in 
other embodiments, the computational device 300 can include 
additional devices that perform additional functions or 
augment existing functions in the computational device 3 00, 
such as, for example, special purpose coprocessors (e.g., 

30 math coprocessor) . The computational device 300 can be 
embodied by one or more integrated circuit chips including 
the devices shown in FIG. 3. Illustratively, an integrated 
circuit chip made by Siemens of Germany and available as part 
no. SLE44CR80S can be used to implement a cryptographic 
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device in accordance with the invention. 

FIG. 4 is a block diagram of the functional components 
of a cryptographic device 400 according to an embodiment of 
the invention. The block 401 (hereinafter sometimes referred 
5 to as "the mathematical primitives storage area") represents 
instructions and/or data ("code") that enables the 
performance of one or more mathematical primitive operations* 
The block 402 (hereinafter sometimes referred to as "the 
cryptographic operations storage area") represents code that 

10 enable the performance of one or more cryptographic 

operations. In general, the block 402 does not include code 
that enables the performance of mathematical primitive 
operations. The block 403 (hereinafter sometimes referred to 
as "the cryptographic characteristic table") represents data 

15 ("access permission data") that specifies cryptographic 

characteristics in accordance with which one or more of the 
mathematical primitive operations or cryptographic operations 
are performed. The block 404 represents code (hereinafter 
sometimes referred to as "the access allowance verifier") 

20 that, using the access permission data, controls access by a 
user to the mathematical primitive operations and 
cryptographic operations. Finally, the block 405 represents 
code (hereinafter sometimes referred to as "the key manager") 
for storing and accessing cryptographic keys and 

25 certificates. 

In general, requests for performance of cryptographic 
operations are received by the access allowance verifier 404. 
Each request is evaluated by the access allowance 
verifier 404 to ensure that the request is allowable. 

30 Whether a request is allowable is evaluated by comparing the 
cryptographic characteristics associated with the request to 
the availability of such cryptographic characteristics, as 
indicated by the access permission data stored in the 
cryptographic characteristic table 403. If the request is 

35 allowable, then cryptographic operations are performed in 
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accordance with the request, as described further below. 

The cryptographic characteristic table 40 3 can include 
access permission data that indicate the availability of any 
desired cryptographic characteristics. For example, such 
5 cryptographic characteristics include, but are not limited 
to, the following characteristics: availability of direct 
access to one or more mathematical primitive operations, 
availability of public key encryption, permissible maximum 
length of public key, permissible maximum length of DES key, 
10 and availability of DES key encryption. Table 1 illustrates 
one example of a cryptographic characteristic table 403 
(defined by appropriately establishing the bit values of a 
byte in a memory device) . 



Bit # 


Function Controlled 






bO 


Primitive Crypto Exposure 

0 - Crypto Primitives Available 

1- Crypto Primitives Not Available 


bl 


Public Key Limitations 

0- No Public Key Available 

1 - Public Key Supported 


b2 


Primitive Public Key Length Limitations 

0- No Limitations (Key Lengths Up To 1024 Supported) 

1- 512 Bit Maximum Key Length 


b3 


Operational Public Key Length Limitations 

0- No Limitations (Key Lengths Up To 1024 Supported) 

1- 512 Bit Maximum Key Length 


b4 


DES Key Length Limitations 

0- 56 Bit Keys Available 

1- 40 Bit DES Keys Only 
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b5 


Single Key des operation LiiitimaT^ions 
0~DES Available 
1-DES Not Available 


b6 


TBD 


b7 


TBD 


Table 1 - CrvDtoaraohic Characteristic Table 



5 In one eitibodiment of the invention, one byte is used to 
establish cryptographic characteristics for asymmetric 
cryptographic operations and a second byte is used to 
establish cryptographic characteristics for symmetric 
cryptographic operations. 

10 Preferably, the access permission data of the 

cryptographic characteristic table 40 3 are stored in a 
programmable read-only memory (PROM), e.g., the PROM 404 of 
the computational device 400 (FIG. 4) . The use of such a 
data storage device enables flexibility in establishing the 

15 access permission data (i.e., the availability of 

cryptographic characteristics) of a cryptographic device, 
since the access permission data can be established at device 
fulfillment (see FIG. 1) . Thus, a single mass-produced type 
Of cryptographic device can be tailored to meet cryptographic 

20 needs for many different applications. Further, the use of 
such a data storage device enables permanency - and, 
therefore, security - in establishing the access permission 
data of a cryptographic device, since once the access 
permission data are established, the access permission data 

25 cannot be changed. Thus, a single mass-produced type of 
cryptographic device can be tailored to satisfy domestic 
demand for robust cryptographic capabilities or to conform to 
export regulations dictating somewhat less robust 
cryptographic capabilities, while, in the latter case. 
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providing confidence that the limitations on the 
cryptographic capabilities cannot be circumvented once the 
cryptographic device has been exported to a user. 

As indicated above, if the request to the access 
5 allowance verifier 404 is allowable, then cryptographic 
operations are performed in accordance with the request. 
Execution of the appropriate cryptographic operation stored 
in the cryptographic operations storage area 402 begins. 
Typically, at some point, execution of the cryptographic 
10 operation will require execution of a mathematical primitive 
operation. Table 2 illustrates the number of times 
particular mathematical primitive operations are performed in 
particular cryptographic operations. 



Alaorithm 


RSA 


RSA 


DSA 


DSA 


Dif f ie- 


Primitive 


Encrypt 


Decrypt 


Sian 


Verify 


Hellman 


Exponentiate 


1 


1 


1 


2 


2 


Modular reduce 


1 


1 


3 


5 


2 


Multiply 






1 


3 




Inverse Modulo 






1 


1 





Table 2 - Construction of Cryptographic Operations 
from fethematical Primitive Operations 



As illustrated in FIG. 4, the mathematical primitive 
operations storage area 401 (i.e,, the code that enables the 

25 performance of one or more mathematical primitive operations) 
can be distinct from the cryptographic operations storage 
area 40 2 (i.e., the code, other than the code for the 
mathematical primitive operations, that enables the 
performance of one or more cryptographic operations, such as 

30 code for generating cryptographic keys, establishing the 
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length of particular data and padding particular data) . In 
particular, the mathematical primitive operations code can be 
made accessible to an applications developer so that the 
applications developer can directly access the functionality 
5 not only of the cryptographic operations, but also of the 
mathematical primitive operations. Exposing the mathematical 
primitive operations to the applications developer provides 
flexibility to the applications developer in creating 
application code. 

10 For example, to add a new cryptographic operation or 

modify an existing cryptographic operation, it is not 
necessary to download to the cryptographic device all of the 
code necessary to accomplish the cryptographic operation. 
Rather, since the mathematical primitive operations are 

15 already accessible on the cryptographic device 400, the 
applications developer can provide code at a higher (and 
simpler) level of abstraction that includes instructions, as 
necessary, to effect performance of the required mathematical 
primitive operations. 

20 Providing accessibility to the sub-operations (such as 

the mathematical primitive operations) of a cryptographic 
operation can be undesirable, since providing such access may 
enable access to other operations performed on the 
cryptographic device, thereby enabling an unscrupulous user 

25 of the cryptographic device to obtain proprietary code, 
cryptographic keys of other persons or entities, or other 
secret information that is present on the cryptographic 
device. In particular, providing such access in a portable 
cryptographic device can be dangerous because physical access 

30 to the cryptographic device cannot be controlled, as can be 
done with non-portable devices by, for example, placing the 
cryptographic device in a locked room. Thus, in a 
cryptographic device (and especially in a portable 
cryptographic device) , it is necessary (or at least very 

35 desirable) that access to particular code stored on a 
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cryptographic device be provided without compromising the 
security of other aspects of the cryptographic device's 
operation. 

According to the invention, since the applications code 
5 accesses the mathematical primitive operations through the 
access allowance verifier, the applications code cannot 
access other operations performed on the cryptographic 
device. Thus, the user is inhibited from gaining access to 
proprietary code, cryptographic keys of other persons or 

10 entities, or other sensitive information that is present on 
the cryptographic device. 

Additionally, some cryptographic devices (in particular, 
some portable cryptographic devices, such as portable 
cryptographic devices including a housing having a smart card 

15 form factor) are sufficiently small that the space available 
for implementing the functionality of the cryptographic 
device is relatively limited. In such small cryptographic 
devices, it can be desirable to embody devices for non- 
volatile data storage (as is typically necessary or desirable 

20 for storage of code for cryptographic operations) with a 
read-only memory (ROM) device or devices, since ROM devices 
are physically smaller than other non-volatile data storage 
devices, such as PROM (programmable read-only memory) or 
EEPROM (electrically erasable programmable read-only memory) . 

25 (A ROM is typically 5-10 times smaller than a PROM or EEPROM, 
for example.) However, as the name implies, the data stored 
in a ROM device cannot be modified once it has been stored. 
To enable modification of cryptographic operations (by 
downloading new code to the cryptographic device) , one of the 

30 physically larger data storage devices, such as an EEPROM, 
must be used. 

In the cryptographic device 400, the mathematical 
primitive operations storage area 401 can be established 
within a ROM, since, if all mathematical primitive operations 

35 that are reasonably anticipated to be required by a 
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cryptographic operation that may be implemented on the 
cryptographic device 400 are provided in the mathematical 
primitive operations storage area 401, the mathematical 
primitive operations need never be modified. The 
5 cryptographic operations storage area 402 can be established 
within a larger data storage device that is also modifiable 
(writable) , such as an EEPROM. However, since the code for 
the cryptographic operations stored in the cryptographic 
operations storage area 402 does not include the code for the 

10 mathematical primitive operations, the amount of required 
data storage space is reduced. Thus, to store the same 
nmtiber and/or complexity of cryptographic operations, a 
smaller EEPROM can be used than if the code for the 
cryptographic operations included the code for the 

15 mathematical primitives, as has been the case in previous 
cryptographic devices. In sum, then, the invention stores 
the part of the code of cryptographic operations that need 
never change in a small and unmodifiable storage device 
(ROM) , while storing the part of the code of cryptographic 

20 operations that a user may desire to change in a larger and 
modifiable storage device (EEPROM) . Consequently, the 
invention retains the capability of modifying the 
cryptographic operations present on a cryptographic device, 
while minimizing or eliminating any limitation on the number 

25 and/or complexity of the cryptographic operations that can be 
provided in the cryptographic device. 

In some cryptographic devices, it may also be desirable 
to store part of the cryptographic operations storage 
area 402 in a ROM. This may be the case, for example, if 

3 0 there is space in the ROM that would otherwise go unused. 
This may also be the case when it is known or believed that 
certain cryptographic operations will be desired by all or 
most users of the cryptographic device. 

Additionally, in other embodiments of the invention, 

3 5 both of the mathematical primitive operations storage 
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area 401 and the cryptographic operations storage area 402 
can be established within an EEPROM* However, such 
embodiments do not offer the advantages associated with using 
a smaller data storage device (e.g., ROM) to store part of 
5 the code for the cryptographic operations . 

The mathematical primitives storage area 401 can include 
any mathematical primitives that can be used in implementing 
a cryptographic operation. For example, such mathematical 
primitives include, but are not limited to, the following 

10 operations: a mod reduce operation, an add operation, a 

subtract operation, a multiply operation, a divide operation, 
an exponentiate operation, an inverse modulo operation, an 
XOR operation, a DES operation and an random number generator 
operation. A mod reduce operation performs a modular 

15 reduction of a specified input value. The mathematical 
operation is Y=AmodC. An add operation performs an integer 
addition operation on two specified operands, and then 
optionally performs a mod reduction. The mathematical 
operations are Y=(A+B) and Y=(A+B)modC. A subtract operation 

20 performs an integer subtraction of two specified operands, 
and then optionally performs a mod reduction. The 
mathematical operations are Y=(A-B) and Y=(A-B)modC. A 
multiply operation performs an integer multiplication 
operation on two specified operands, and then optionally 

25 performs a mod reduction. The mathematical operations are 
Y=(A*B) and Y={A*B)modC. A divide operation performs an 
integer division operation using two specified operands, and 
then optionally performs a mod reduction. The mathematical 
operations are Y=(A/B) and Y=(A/B)modC. An exponentiate 

30 operation performs the classic public key operation 

associated with key agreement, digital signature generation, 
digital signature verification, and some forms of encryption 
and decryption. The mathematical operation is Y=(A^)modC. 
An invert modulo operation calculates the multiplicative 

35 inverse within a set of positive integers. The inversion 
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operation optionally performs a mod reduction. The 
mathematical operations are Y=(A"''') and Y=(A"^)modC (note: 
(A* (A"^ )modC=l) . An exclusive-or operation performs an 
exclusive-OR on arbitrarily long operands, and then 
5 optionally performs a mod reduction. The mathematical 

operations are Y={A8B) and Y= (Aj8'B)modC. A DES operation will 
encrypt or decrypt a single block of 64 bits. The DES 
algorithm is specified in FIPS PUB 46: Y=DES (EDFlag, Key, 
Block) (note:Y=DES (Decrypt, Key, DES (Encrypt, Key, Y) ) ) . A 

10 generate random operation will generate a random number or 
pseudo-random number, i.e., Y=RANDOM (). 

The cryptographic operations storage area 402 can 
include any desired cryptographic operations. For example, 
the cryptographic operations storage area 402 can include, 

15 but are not limited to, the following operations: RSA 

encrypt, RSA decrypt, DSA sign, DSA verify, 3 -key triple DES, 
Dif f ie-Hellman and elliptic curve. However, it is emphasized 
that any other cryptographic operations, including, in 
particular, cryptographic operations that are developed in 

20 the future, can be included in the cryptographic operations 
storage area 402. It is an important aspect of the invention 
that any cryptographic operation can be easily implemented in 
a cryptographic device according to the invention. 

The invention can be used with any cryptographic device. 

25 For example, the invention can be embodied in portable 
cryptographic devices shaped and sized in accordance with 
established smart card specifications (e.g., ISO 7816) or 
established PCMCIA specifications. 

Various embodiments of the invention have been 

30 described. The descriptions are intended to be illustrative, 
not limitative. Thus, it will be apparent to one skilled in 
the art that certain modifications may be made to the 
invention as described above without departing from the scope 
of the claims set out below. 



